Garry Tan bcded824f0 fix: address Codex adversarial findings in /cso v2 ...

Six fixes from Codex adversarial review:

1. Phase 2: Use `git log -G` (regex) instead of `-S` (literal) for
   patterns with alternation (ghp_|gho_|github_pat_, etc.)

2. Phase 12 exclusion #5: Add exception so CI/CD pipeline findings
   from Phase 4 are never auto-discarded when --infra is active

3. Phase 12 exclusion #6: Add exception that unpinned actions and
   missing CODEOWNERS are concrete risks, not "missing hardening"

4. Phase 12 exclusion #15: Add exception that SKILL.md files are
   executable prompt code, not documentation — Phase 8 findings
   in SKILL.md must not be excluded

5. Phase 12 exclusion #1: Add exception that LLM cost/spend
   amplification from Phase 7 is financial risk, not DoS

6. E2E tests: Add exitReason === 'success' assertion to all 3 tests;
   move finalizeEvalCollector to file-level afterAll

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-23 06:52:00 -07:00

..

ACKNOWLEDGEMENTS.md

docs: /cso v2 acknowledgements — 10 projects that informed the design

2026-03-22 23:15:11 -07:00

SKILL.md

fix: address Codex adversarial findings in /cso v2

2026-03-23 06:52:00 -07:00

SKILL.md.tmpl

fix: address Codex adversarial findings in /cso v2

2026-03-23 06:52:00 -07:00